[v9_9] update README, HISTORY

diff --git a/HISTORY b/HISTORY
index e98f9b41460df3f42991c761fa5f28b3f6ca2246..9a3b7599965b68f741873623cc54525fcc1365ce 100644 (file)
--- a/HISTORY
+++ b/HISTORY
@@ -1,5 +1,57 @@
 Summary of functional enhancements from prior major releases of BIND 9:
 
+BIND 9.8.0
+
+        BIND 9.8.0 includes a number of changes from BIND 9.7 and earlier
+        releases.  New features include:
+
+        - Built-in trust anchor for the root zone, which can be
+          switched on via "dnssec-validation auto;"
+        - Support for DNS64.
+        - Support for response policy zones (RPZ).
+        - Support for writable DLZ zones.
+        - Improved ease of configuration of GSS/TSIG for
+          interoperability with Active Directory
+        - Support for GOST signing algorithm for DNSSEC.
+        - Removed RTT Banding from server selection algorithm.
+        - New "static-stub" zone type.
+        - Allow configuration of resolver timeouts via
+          "resolver-query-timeout" option.
+       - The DLZ "dlopen" driver is now built by default.
+       - Added a new include file with function typedefs
+          for the DLZ "dlopen" driver.
+       - Made "--with-gssapi" default.
+       - More verbose error reporting from DLZ LDAP.
+
+BIND 9.7.0
+
+       BIND 9.7.0 includes a number of changes from BIND 9.6 and earlier
+       releases.  Most are intended to simplify DNSSEC configuration.
+
+       New features include:
+
+       - Fully automatic signing of zones by "named".
+       - Simplified configuration of DNSSEC Lookaside Validation (DLV).
+       - Simplified configuration of Dynamic DNS, using the "ddns-confgen"
+         command line tool or the "local" update-policy option.  (As a side
+         effect, this also makes it easier to configure automatic zone
+         re-signing.)
+       - New named option "attach-cache" that allows multiple views to
+         share a single cache.
+       - DNS rebinding attack prevention.
+       - New default values for dnssec-keygen parameters.
+       - Support for RFC 5011 automated trust anchor maintenance
+       - Smart signing: simplified tools for zone signing and key
+         maintenance.
+       - The "statistics-channels" option is now available on Windows.
+       - A new DNSSEC-aware libdns API for use by non-BIND9 applications
+       - On some platforms, named and other binaries can now print out
+         a stack backtrace on assertion failure, to aid in debugging.
+       - A "tools only" installation mode on Windows, which only installs
+         dig, host, nslookup and nsupdate.
+       - Improved PKCS#11 support, including Keyper support and explicit
+         OpenSSL engine selection.
+
 BIND 9.6.0
 
         Full NSEC3 support

diff --git a/README b/README
index 91c564c54a72b163116f76c26fcc1bae840bd5cd..94390693e43751bbe9ae44b96b0110f2f9e585b4 100644 (file)
--- a/README
+++ b/README
@@ -110,30 +110,6 @@ BIND 9.9.0
           indicating their key ID, algorithm and function
         - Simplified nsupdate syntax and added readline support
 
-BIND 9.8.0
-
-        BIND 9.8.0 includes a number of changes from BIND 9.7 and earlier
-        releases.  New features include:
-
-        - Built-in trust anchor for the root zone, which can be
-          switched on via "dnssec-validation auto;"
-        - Support for DNS64.
-        - Support for response policy zones (RPZ).
-        - Support for writable DLZ zones.
-        - Improved ease of configuration of GSS/TSIG for
-          interoperability with Active Directory
-        - Support for GOST signing algorithm for DNSSEC.
-        - Removed RTT Banding from server selection algorithm.
-        - New "static-stub" zone type.
-        - Allow configuration of resolver timeouts via
-          "resolver-query-timeout" option.
-       - The DLZ "dlopen" driver is now built by default.
-       - Added a new include file with function typedefs
-          for the DLZ "dlopen" driver.
-       - Made "--with-gssapi" default.
-       - More verbose error reporting from DLZ LDAP.
-
-
 Building
 
        BIND 9 currently requires a UNIX system with an ANSI C compiler,